Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: vqEbsOzRqPjLs/8CL2UioIFi5su/cGrNGHhYRhPuPf8=
Subject key identifier: AE:77:68:63:CC:49:5E:F4:B1:32:B3:F4:77:D1:FF:F3:51:54:FB:18
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019756116A2AD7F95F27CB468EFFAA8B62D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 10DD
Signing time: Mon 09 Jun 2025 19:01:11 +0000
Manifest this update: Mon 09 Jun 2025 19:01:11 +0000
Manifest next update: Tue 10 Jun 2025 19:01:11 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: Z8x+o38/Jwf5iXfdEpbaeIfygKH/YIkLxduRdWbKoU0=)
2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:6a:2a:d7:f9:5f:27:cb:46:8e:ff:aa:8b:62:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Jun 9 19:01:11 2025 GMT
Not After : Jun 10 19:01:11 2025 GMT
Subject: CN=ae776863cc495ef4b132b3f477d1fff35154fb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:ca:af:a3:d4:50:05:c4:91:84:c7:7a:c5:
a7:92:be:e9:4b:b7:af:b3:04:31:56:fe:8c:eb:7a:
39:fa:c7:4e:3f:4e:1c:6b:8b:21:3f:16:55:9a:85:
97:6a:11:56:c0:26:ca:a2:18:70:cc:f3:72:dc:ea:
01:b8:58:71:51:2a:a2:40:73:59:a4:70:4b:e6:0e:
fc:df:d8:53:f9:87:d1:69:1c:7f:32:3a:3e:f4:d4:
84:c4:5d:6a:d0:3f:09:e6:94:23:e6:94:50:0d:96:
8a:24:f8:79:45:1d:04:a9:c1:f5:5b:e5:f4:7e:82:
6d:ff:62:f7:47:81:dd:8a:4f:12:3b:01:ed:81:f8:
17:33:f6:29:48:2c:d7:bc:8d:09:b9:3f:8a:23:27:
08:c1:96:ce:1e:62:76:6e:f9:a2:4a:f9:d6:70:f1:
ef:e4:96:e5:1b:74:2e:c0:4d:24:b6:5a:7a:aa:43:
3c:b4:72:d4:75:4c:73:d8:90:eb:77:7a:23:af:c5:
49:24:5f:f1:ee:b7:27:1f:db:b0:d5:2c:d5:1c:c3:
b4:cf:3b:ca:41:54:a1:fd:10:90:11:66:61:93:41:
f9:b3:a8:55:84:be:88:21:3b:9b:93:1b:2d:d5:37:
e5:a4:30:e7:e2:21:3f:cd:ed:a0:74:5f:f9:f7:da:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:68:63:CC:49:5E:F4:B1:32:B3:F4:77:D1:FF:F3:51:54:FB:18
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:30:0d:cc:d0:94:9f:96:f0:db:d0:2f:60:2f:06:70:9b:96:
75:df:f3:d6:92:fa:e4:d8:e2:b5:48:ec:50:f7:56:7e:7f:10:
60:2e:5e:7c:48:93:2e:24:46:18:92:52:94:2b:2a:e2:b0:7e:
b6:b1:9b:99:a0:d9:45:75:21:5a:23:0d:7e:cd:a6:1b:9f:4d:
1c:78:a0:35:36:65:46:e1:38:da:64:39:f5:9e:d1:51:fe:1c:
f7:9f:d4:c9:35:8b:37:42:ee:45:38:f6:61:16:72:6e:8b:90:
89:52:90:2f:d0:90:29:26:f1:6f:8a:80:aa:5b:cc:74:2f:02:
e6:3b:76:80:2f:83:9f:c4:67:88:15:1a:d8:62:d8:3b:c5:96:
22:3f:5b:45:87:0f:47:36:35:8f:30:8f:6c:23:43:e2:ab:06:
69:56:4e:26:21:d1:b0:f1:28:78:e8:73:25:89:dc:f9:48:ff:
2f:2c:2f:67:b1:cb:89:de:c7:81:6e:69:6b:0e:d3:89:17:d1:
c8:02:ec:6d:4c:51:b4:c0:2d:cf:52:18:40:47:e4:5c:04:26:
9e:53:74:61:cc:69:6c:28:2a:b8:7d:66:d2:8b:16:ca:e5:b5:
e5:b4:48:53:20:bf:19:27:16:f7:43:33:9a:3b:21:c7:11:63:
11:73:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:38:11 2025 by rpki-client